topic Getting Date to Display Correctly - CSV Report in Getting Data In

Getting Date to Display Correctly - CSV Report

cruzalan90 — Thu, 10 Oct 2013 16:22:58 GMT

Hello,

I'm stumped...I'm trying to correctly display 'Date' in a scheduled CSV report. Within Splunk, date is displayed correctly:
_time

10/10/13 8:48:57.000 AM

Within CSV report:
_time
1380916998

Also tried this: |convert ctime(_time) as timestamp
But timestamp displays 10:30.1 which I than have to format cell to recognize 'Date' value. (10/6/13 12:10 PM)

Re: Getting Date to Display Correctly - CSV Report

richgalloway — Thu, 10 Oct 2013 17:57:00 GMT

Have you tried | eval ts=strftime(_time, "%m/%d/%y %H:%M %p") ?

Re: Getting Date to Display Correctly - CSV Report

cruzalan90 — Thu, 10 Oct 2013 19:54:42 GMT

Took a little time to play with it but it worked!

Thank you

Re: Getting Date to Display Correctly - CSV Report

richgalloway — Fri, 11 Oct 2013 11:53:07 GMT

Please mark my answer as accepted.